What is claimed is: 

1 . A Montgomery modular multiplier which calculates a value 
congruent to "ABFT 1 " (mod M), where A and B are input n-bit numbers, R" 1 is 
an inverse number of R modular-multiplied for "mod M", and M is a modulus, 
the Montgomery modular multiplier comprising: 

an A-register storing a bit value a; (where i is an integer ranging from 0 
to n-1) of the number A, which is smaller than the modulus M; 

a B-register storing a bit value b\ of the number B, which is smaller than 
the modulus M; 

an M-register storing a bit value rr\\ of the modulus M, which is an odd 
number; 

a bjA calculation logic circuit multiplying the number A by bj to obtain 

biA; 

a qj calculation logic circuit solving a Boolean logic equation "So XOR Co 
XOR (bj AND a 0 )", where s 0 is the least significant bit (LSB) of a sum S, c 0 is 
the LSB of a carry C, bj is the bit value of the number B, and a 0 is the LSB of 
the number A, to obtain a bit value qi; 

a qiM calculation logic circuit multiplying M by q, to obtain qjM; 

a 4-2 compressor first performing n additions on the carry C, the sum S, 
the bjA, and the q { M to obtain interim values summing the interim values to 
obtain a result by carry propagation adder in response to a carry propagation 
adder signal; 

an S-register updating a bit value s s of the sum S and storing the 
updated bit value; and 

a C-register updating a bit value q of the carry C and storing the 
updated bit value. 

2. The Montgomery modular multiplier of claim 1 , wherein the 4-2 
compressor comprises: 

a first full adder unit, summing a bit value bjaj of bjA, a bit value s i+ i of 
the sum S, and the bit value q of the carry C to obtain a carry cAj and a sum 
sAi; 
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a MUX unit selectively outputting either a bit value qjMi of qiM, the carry 
cA M , and sAj or the bit value s M of S, the bit value Ci of the carry C, and the 
bit value c M of the C, in response to the carry propagation adder signal; 

a second full adder unit performing n additions on the bit value qiinj of 
qiM, cAj.1, and sAj to calculate interim bit values Sj and q of S and C, when the 
carry propagation adder signal is in an inactive state, and then summing the 
bit value s i+ i of S, the bit value d of C, and the bit value c M of C to obtain final 
results of the sum S and carry C, when the carry propagation adder signal is 
in an active state. 

3. The Montgomery modular multiplier of claim 1 , wherein the carry 
save adder structure is a 4-input 2-output structure, in which the first and 
second full adder units operate when the carry propagation adder signal is in 
an inactive state. 

4. The Montgomery modular multiplier of claim 1 , wherein the carry 
propagation adder structure is a 3-input 2-output structure, in which only the 
second full adder unit operates when the carry propagation adder signal is in 
an active state. 

5. The Montgomery modular multiplier of claim 2, wherein the LSB 
of the carry cA M and the LSB of the carry c M are in a first logic state. 

6. The Montgomery modular multiplier of claim 2, wherein the Most 
Significant Bit (MSB) of the sum s i+ i is equal to the carry cA n -i at a clock pulse 
before the carry propagation adder signal is activated. 

7. A method of performing a Montgomery modular multiplication in 
a Montgomery modular multiplier, which includes registers for storing bit 
values a„ b„ m>, q, and si (where i denotes an integer in the range of 0 to n*1) 
of a word A, a word B, a modulus M, a carry C, and a sum S, respectively, 
and calculates a value congruent to "ABR" 1 " (mod M), where A and B are 
input n-bit numbers, R" 1 is an inverse number of R modular-multiplied for 
"mod M", and M is a modulus, the method comprising: 
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receiving the number A, the number B, and the modulus M; 

multiplying the number A by a bit value bi to obtain each bit of bjA; 

solving a Boolean logic equation "s 0 XOR c 0 XOR (bi AND ao)", where 
s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bj is 
the bit value of the number B, and a 0 is the LSB of the number A, to obtain a 
bit value qi (where i denotes an integer in the range of 0 to n*1); 

multiplying the number M by the bit value qi to obtain each bit of qiM; 

performing n additions on the carry C, the sum S, the bjA, and the qiM 
to obtain interim values for each bit of the sum S and the carry C in a carry 
save adder structure, in response to a carry propagation adder signal; and 

summing the interim values to obtain the final results of the sum S and 
carry C in a carry propagation adder structure, in response to the carry 
propagation adder signal. 

8. The method of claim 7, wherein the number A is smaller than 
the modulus M. 

9. The method of claim 7, wherein the number B is smaller than 
the modulus M. 

10. The method of claim 7, wherein the modulus M is an odd 
number. 

1 1 . The method of claim 7, wherein the interim and final values of S 
and the interim and final values of C are calculated by: 

summing a bit value bjA of the bA, a bit value Sm of S, and the bit 
value Ci of C to obtain a carry cAi and sAi; 

selectively outputting either a bit value qjMj of the qjM, cA M , and sA or 
the bit value s M of S, the bit value q of C, and a bit value c M of C, in response 
to the carry propagation adder signal; 

performing n additions on the bit value qimj of the qM, cAm, and sA to 
calculate interim bit values Si and q of S and C, when the carry propagation 
adder signal is in an inactive state; and 
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summing the bit value s i+ i of S, the bit value q of C, and the bit value 
cm of C to obtain final results of S and C, when the carry propagation adder 
signal is in an active state. 

12. The method of claim 7, wherein the carry save adder structure is 
a 4-input 2-output structure, in which the interim values of S and C are 
obtained from the bjA and qjM when the carry propagation adder signal is in 
an inactive state. 

13. The method of claim 7, wherein the carry propagation adder 
structure is a 3-input 2-output structure, in which the final values of S and C 
are obtained from the interim values of S and C when the carry propagation 
adder signal is in an active state. 

14. The method of claim 1 1 , wherein the LSB of cA M and the LSB of 
Cm are in a first logic state. 

15. The method of claim 1 1 , wherein the MSB value of s j+ i is equal 
to the bit value cA n _i at a clock before the carry propagation adder signal is 
activated. 

16. A method of performing radix 2 N Montgomery multiplication, 
where N>=1 , comprising; 

receiving a multiplicand (A), a modulus (M), and a multiplier (B); 

performing carry save addition on at least four inputs related to the 
multiplicand, modulus, and multiplier to generate a result in redundant 
representation; and 

performing carry propagation addition to generate a result in normal 
representation in response to a carry propagation adder signal. 

17. A Montgomery multiplier comprising: 

a multiplicand (A) register, storing a bit value a; of the number A; 
a modulus (M) register, storing a bit value mj of the number M; 
a multiplier (B) register, storing a bit value bj of the number B; 
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a b|A calculation logic circuit multiplying the number A by a bit value bj 
to obtain each bit of bjA; 

a qi calculation logic circuit solving a Boolean logic equation "s 0 XOR Co 
XOR (bj AND a 0 )", where s 0 is the least significant bit (LSB) of a sum S, c 0 is 
the LSB of a carry C, bj is the bit value of the number B, and a 0 is the LSB of 
the number A, to obtain a bit value q\ (where i denotes an integer in the range 
of Oto n*1); 

a qiM calculation logic circuit multiplying the modulus M by the bit value 
qi to obtain each bit of qiM; and 

a t-s compressor, wherein t >3, and s>1 , performing n additions on the 
carry C, the sum S, the bjA, and the qjM to obtain interim values for each bit of 
the sum S and the carry C in a carry save adder structure and summing the 
interim values to obtain final results of the S and C in a carry propagation 
adder structure, in response to a carry propagation adder signal. 
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